Issues

• OpenSpec agent skills go stale after pin bumps: CONTRIBUTING.md only says openspec init once

  documentation
  schubergphilis/claude-docker#243 · Filter by author sbp-bvanb opened on Oct 30, 2026

• --egress-lock audit .meta doesn't record read-only workspaces

  enhancement
  schubergphilis/claude-docker#242 · Filter by author stefanwb opened on Oct 30, 2026

• --egress-allowlist: an allow hint after the denied summary, and a report of entries added since the last session

  enhancement
  schubergphilis/claude-docker#239 · Filter by author OnnoJan-SBP opened on Oct 29, 2026

• --egress-allowlist: IP/CIDR entries and a per-repository list

  enhancement
  schubergphilis/claude-docker#238 · Filter by author OnnoJan-SBP opened on Oct 29, 2026

• --egress-allowlist: presets and hosts implied by credential flags

  enhancement
  schubergphilis/claude-docker#237 · Filter by author OnnoJan-SBP opened on Oct 29, 2026

• --egress-allowlist: make the DNS-closure check deterministic (Docker >= 26), and support podman

  enhancement
  schubergphilis/claude-docker#236 · Filter by author OnnoJan-SBP opened on Oct 29, 2026

• --egress-allowlist: refuse public and multi-tenant suffixes (.co.uk, .github.io, .amazonaws.com)

  enhancement
  schubergphilis/claude-docker#235 · Filter by author OnnoJan-SBP opened on Oct 29, 2026

• git rebase and cherry-pick fail on a clean tree on Docker Desktop mounts (stale index stat)

  bug
  schubergphilis/claude-docker#229 · Filter by author sbp-bvanb opened on Oct 28, 2026

• Verify --glab / --api auth proxy with real credentials (tasks 2.5, 4.3 of #196)

  schubergphilis/claude-docker#227 · Filter by author sbp-bvanb opened on Oct 28, 2026

• Verify launch host-file reads on Windows (Git Bash)

  readiness
  schubergphilis/claude-docker#226 · Filter by author stefanwb opened on Oct 28, 2026

• How should commits made inside claude-docker get signed?

  schubergphilis/claude-docker#220 · Filter by author stefanwb opened on Oct 28, 2026
  2

• Does the preinstalled Go toolchain fit the vision and scope page?

  schubergphilis/claude-docker#219 · Filter by author stefanwb opened on Oct 28, 2026

• [Security] Running as host root keeps CAP_DAC_READ_SEARCH for the whole session, which lets the agent read any host file (Shocker / open_by_handle_at)

  schubergphilis/claude-docker#210 · Filter by author Joeri-Abbo opened on Oct 26, 2026
  1

• Egress lock: the proxy image never picks up squid fixes; publish it to GHCR

  enhancement
  schubergphilis/claude-docker#204 · Filter by author OnnoJan-SBP opened on Oct 23, 2026

• Bring #101's egress.sh and managed-settings-precedence.sh up to the bash standard

  schubergphilis/claude-docker#194 · Filter by author sbp-bvanb opened on Oct 15, 2026

• Restructure the Dockerfile into a multi-stage build and trim Node, az's Python and Go

  dockerenhancement
  schubergphilis/claude-docker#184 · Filter by author sbp-bvanb opened on Oct 15, 2026
  2

• Publish core and full image variants: ~210 MB of flag-specific tools ship to every user

  dockerenhancement
  schubergphilis/claude-docker#183 · Filter by author sbp-bvanb opened on Oct 15, 2026

• Every release re-pulls ~640 MB: make image layers reproducible (fixed timestamps)

  dockerenhancement
  schubergphilis/claude-docker#182 · Filter by author sbp-bvanb opened on Oct 15, 2026

• tests/gh-proxy-integration.sh: run_wrapped stalls on macOS with GNU timeout, and the timeout counts as a pass

  bug
  schubergphilis/claude-docker#179 · Filter by author sbp-bvanb opened on Oct 15, 2026

• Auto mode has no starting policy, and runtime package installs aren't hardened: add an example auto-mode config and analyse package-manager defaults

  documentationenhancement
  schubergphilis/claude-docker#178 · Filter by author sbp-bvanb opened on Oct 15, 2026

• Refactor shell test harnesses to the bash standard and slim the README into docs/

  schubergphilis/claude-docker#171 · Filter by author OnnoJan-SBP opened on Oct 13, 2026
  2

• --glab: give the in-container glab a writable config dir instead of a read-only mount

  enhancement
  schubergphilis/claude-docker#168 · Filter by author sbp-bvanb opened on Oct 12, 2026
  1

• CI: run tests/gh-proxy-integration.sh (the gh auth-proxy's only token-injection test)

  schubergphilis/claude-docker#165 · Filter by author OnnoJan-SBP opened on Oct 11, 2026
  1

• Cross-session peer messaging (ListAgents / SendMessage) does not work between claude-docker sessions

  documentationenhancement
  schubergphilis/claude-docker#54 · Filter by author stefanwb opened on Sep 7, 2026
  2

• Automate task + nodejs pin freshness (dated oracle, apt install unchanged)

  enhancement
  schubergphilis/claude-docker#47 · Filter by author dtump opened on Sep 3, 2026
  4